Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: aEHsf7YN49LallicK6iJ+ShAoeHOQvtzFkkXo/v54T0=
Subject key identifier: 22:7F:17:BC:47:CD:C1:BA:5C:55:73:26:03:AA:00:8A:F2:C1:A6:DA
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 01988D6B44BE6BD37C7C49E1373D01FDEC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 06:01:14 +0000
Manifest this update: Sat 09 Aug 2025 06:01:14 +0000
Manifest next update: Sun 10 Aug 2025 06:01:14 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: zIqwzVCT/8ckCCBIq2D+0c5p7e8G7y5fykKoCgtYGz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:44:be:6b:d3:7c:7c:49:e1:37:3d:01:fd:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Aug 9 06:01:14 2025 GMT
Not After : Aug 10 06:01:14 2025 GMT
Subject: CN=227f17bc47cdc1ba5c55732603aa008af2c1a6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:55:f2:b8:77:4c:c7:39:da:e9:d1:82:6b:
cd:f0:f8:ae:3b:8a:45:d2:af:c7:70:28:79:0b:67:
f4:38:f6:7d:1a:ef:1c:c4:a4:52:b7:45:7f:83:45:
b6:99:a6:ff:fa:89:3a:cc:bb:0c:13:4c:3a:13:6e:
a2:6a:1f:ec:11:84:31:44:0c:1b:60:41:64:eb:df:
ae:05:b2:7d:15:a8:b1:54:dc:33:75:ac:04:a1:9b:
fa:be:58:91:45:60:13:68:53:e0:4e:b9:73:16:bf:
9f:46:93:4a:20:02:a5:4b:42:46:3d:3f:48:48:9d:
33:8c:15:c6:7f:2c:0f:93:b4:f9:5b:0d:0d:ed:a7:
96:03:dc:dd:97:76:f8:88:1f:9e:72:e9:eb:f3:1f:
e7:b0:9a:46:f5:58:6e:f6:50:55:70:d8:11:2e:c5:
f1:c1:c0:95:cd:fc:62:b7:9b:3a:cc:2f:a8:c6:cf:
9d:7a:69:a9:7f:95:af:f9:b4:c9:ee:60:cd:79:d8:
ef:ea:d0:ee:b8:9d:ac:af:ad:54:12:48:ab:a8:ac:
e6:41:fe:19:63:59:ab:3a:1b:e1:04:69:a9:1f:3d:
14:04:59:7d:2e:f6:6f:4d:dc:e5:aa:18:77:a5:ee:
3f:dd:de:0a:c2:ef:6f:38:40:7c:55:7b:c0:05:07:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:17:BC:47:CD:C1:BA:5C:55:73:26:03:AA:00:8A:F2:C1:A6:DA
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:d0:2a:08:67:20:4b:fc:5b:a6:d5:78:ea:61:25:89:f9:49:
9d:e7:e4:b0:ee:ae:e2:96:96:27:ad:f7:63:ef:ee:fc:d6:61:
f6:d5:c3:b1:b6:ef:78:de:92:cc:a6:3a:c1:50:1b:6b:d0:2f:
92:1a:3c:e6:3d:b7:66:88:ec:de:e5:9e:7b:bd:13:c5:c7:f7:
c2:28:28:09:1b:ce:fa:9c:e4:ab:b2:d0:30:e1:4f:28:9b:c1:
50:2b:16:9d:c7:23:0e:80:18:b8:bd:5f:e8:a7:c3:a8:1c:50:
6c:d2:d8:9f:5d:bb:30:6a:e9:44:37:f6:6c:53:c7:73:5c:2a:
8c:1a:6c:ea:db:14:5d:94:f3:6e:ec:d8:c1:e1:d3:93:83:6b:
6f:2b:6d:00:2b:b3:36:e1:f9:8a:50:d6:31:a5:68:58:10:98:
f3:3c:02:26:ac:d5:4f:19:7d:15:50:97:f0:82:40:bf:b6:a1:
77:29:39:1a:54:f1:a8:f9:c8:b0:23:c5:a5:d0:f1:d9:44:69:
16:45:ec:0d:7c:38:6b:88:c2:78:67:09:58:32:6b:a9:b6:58:
1e:02:4b:06:52:7c:59:53:64:d7:02:4c:18:09:00:8f:13:b3:
67:01:82:2d:60:a0:04:ee:e4:34:ce:36:5a:f8:a3:ba:23:66:
45:b6:9b:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNa0S+a9N8fEnhNz0B/ewAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj
YTBkMGEwHhcNMjUwODA5MDYwMTE0WhcNMjUwODEwMDYwMTE0WjAzMTEwLwYDVQQD
EygyMjdmMTdiYzQ3Y2RjMWJhNWM1NTczMjYwM2FhMDA4YWYyYzFhNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS1V8rh3TMc52unRgmvN8PiuO4pF
0q/HcCh5C2f0OPZ9Gu8cxKRSt0V/g0W2mab/+ok6zLsME0w6E26iah/sEYQxRAwb
YEFk69+uBbJ9FaixVNwzdawEoZv6vliRRWATaFPgTrlzFr+fRpNKIAKlS0JGPT9I
SJ0zjBXGfywPk7T5Ww0N7aeWA9zdl3b4iB+ecunr8x/nsJpG9Vhu9lBVcNgRLsXx
wcCVzfxit5s6zC+oxs+demmpf5Wv+bTJ7mDNedjv6tDuuJ2sr61UEkirqKzmQf4Z
Y1mrOhvhBGmpHz0UBFl9LvZvTdzlqhh3pe4/3d4Kwu9vOEB8VXvABQf1xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ/F7xHzcG6XFVzJgOqAIrywabaMB8GA1UdIwQY
MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt
MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3
LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1dAqCGcg
S/xbptV46mEliflJnefksO6u4paWJ633Y+/u/NZh9tXDsbbveN6SzKY6wVAba9Av
kho85j23Zojs3uWee70Txcf3wigoCRvO+pzkq7LQMOFPKJvBUCsWnccjDoAYuL1f
6KfDqBxQbNLYn127MGrpRDf2bFPHc1wqjBps6tsUXZTzbuzYweHTk4NrbyttACuz
NuH5ilDWMaVoWBCY8zwCJqzVTxl9FVCX8IJAv7ahdyk5GlTxqPnIsCPFpdDx2URp
FkXsDXw4a4jCeGcJWDJrqbZYHgJLBlJ8WVNk1wJMGAkAjxOzZwGCLWCgBO7kNM42
WvijuiNmRbabvg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:25:50 2025 by rpki-client